1279772 - Do not reveal hostname in Message-ID

Status: RESOLVED WORKSFORME

(MailNews Core :: Networking: SMTP, enhancement)

Description

[armin]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160607223741

Steps to reproduce:

Write an E-Mail


Actual results:

A Message-ID header is generated containing the hostname. This reveals
information about my local network configuration.

Does RFC-822 really /require/ the use of the hostname?

The intent is probably to avoid duplicates in Message-IDs but Thunderbird can not guarantee the uniqueness anyways (ie. when another MUA is used on the same host).


Expected results:

Just use a longer pseudo-random string. The odds to generate two identical 256-Bit random numbers in the same context (threading in a mailing list or INBOX) should be low enough.

Comment 1

[armin]

It is not the local hostname (just in my configuration) but the domain of the From: address (example.com if From: [e-mail].

Comment 2

[Magnus Melin [:mkmelin]]

Looks to me you can do that already: http://mxr.mozilla.org/comm-central/source/mailnews/compose/src/nsMsgCompUtils.cpp#926
Set a String pref for the identity , mail.identity.<youridhere>.FQDN

Comment 3

[Jorg K (CEST = GMT+2)]

Yes, this works. I set mail.identity.id1.FQDN to "sapo" for my first configured account/identity and the resulting message ID is for example
<2e2db65d-9606-66e6-8120-00cd702a98d1@sapo>